Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: Oqgq/sBNTCO1luYhlrIBa8qz0R5iyOfmdRi/2mzxlJI=
Subject key identifier: 65:48:C5:95:CD:1F:40:6C:98:D0:ED:DD:4A:74:96:F3:C3:4C:CA:95
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019D99D0DEACB1E68E04D9562DDD1CA90042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:35 +0000
Manifest this update: Fri 17 Apr 2026 05:01:35 +0000
Manifest next update: Sat 18 Apr 2026 05:01:35 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: kK7VlS0RZv576tO1tsg+wCCMrXFn+qaaA5kH4hO1kWA=)
2: tYHsABD7wqlyFO9X8Yy_-luDgKw.roa (hash: i2ZdarVr8LLRaDGxjRmRFhWtnj6AvxOcMrUABRbNylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:de:ac:b1:e6:8e:04:d9:56:2d:dd:1c:a9:00:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Apr 17 05:01:35 2026 GMT
Not After : Apr 18 05:01:35 2026 GMT
Subject: CN=6548c595cd1f406c98d0eddd4a7496f3c34cca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:17:7f:82:49:d6:a1:1f:17:e4:07:8e:53:
84:a2:89:a6:e7:02:5a:1a:c5:3c:a6:3a:25:5e:23:
4b:90:81:f0:4a:05:52:25:61:1b:09:fd:e5:b0:fb:
7b:ef:56:81:35:eb:f5:f6:f8:13:fe:4e:f0:6a:28:
6c:ed:54:29:42:c0:1b:a2:47:9f:f4:65:25:ea:51:
2e:3f:6f:ff:f7:2e:f7:20:50:f4:30:0d:00:b1:8d:
ce:e9:18:b5:37:41:df:84:ed:78:2a:49:c3:4a:31:
b6:9f:5b:0c:1b:90:f5:b4:ed:d9:00:de:1c:98:e0:
cd:63:2e:66:e5:e9:d3:2e:8b:9c:ed:c9:5f:be:2c:
17:aa:10:79:93:ff:b3:af:4c:0e:9e:cc:7f:78:2b:
bc:2d:7f:25:f4:52:3f:c9:4c:67:eb:68:84:0a:20:
bd:0b:6f:e8:90:e0:20:1d:f5:d7:f6:18:19:2b:97:
08:65:11:81:ce:81:36:d5:99:77:eb:ac:d6:bd:17:
b1:23:19:8c:1e:4f:90:7f:87:b0:d5:6f:9d:39:f2:
9f:10:d2:fb:a8:de:2f:c3:89:bd:df:ec:a8:e3:74:
2f:91:50:fc:64:d7:2e:bb:ea:bb:5a:de:97:9e:a6:
0d:8b:b9:19:f4:90:d7:cb:32:d2:29:76:66:18:2b:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:C5:95:CD:1F:40:6C:98:D0:ED:DD:4A:74:96:F3:C3:4C:CA:95
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:55:2c:bd:27:25:2c:e6:bb:0c:f3:08:88:60:0d:e0:b7:c1:
ba:2f:e7:5b:2c:aa:e1:7a:0b:d8:fa:76:1e:dc:7f:44:cb:79:
c3:46:a5:4b:c7:25:34:71:fa:92:49:f7:5a:e8:1b:5f:9e:60:
34:7d:6c:57:7e:c3:76:21:93:dc:31:bd:fb:ee:60:4d:2f:f0:
bb:10:9e:1f:90:dd:71:3c:56:17:15:a7:86:3a:31:f8:f6:19:
e2:f5:5a:e7:01:7c:83:e7:12:75:e2:d9:98:57:63:8e:15:a0:
29:77:59:5b:85:7f:98:0a:f2:a4:3e:30:69:59:ca:47:45:1c:
48:eb:87:66:b3:2a:62:54:91:4b:01:33:f5:64:f9:02:f6:90:
d7:01:b0:eb:a1:69:54:9e:fc:d0:f6:59:14:bd:36:0f:a1:72:
24:7b:a1:71:d8:e2:df:f5:42:e9:13:c2:2a:d9:74:66:49:e9:
ac:86:87:59:1c:13:84:5c:33:b9:21:eb:4c:a8:76:08:29:62:
67:2a:91:b5:9f:1a:2d:ca:e8:29:32:07:1e:c2:d9:5d:b6:c8:
0a:5f:42:22:42:ea:96:fb:70:e9:6c:89:b4:52:e9:5f:13:84:
b4:c3:6c:3a:78:25:c3:65:3c:59:13:ae:17:41:46:8b:1d:db:
b8:01:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:07 2026 by rpki-client